Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
File: Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft (raw, json)
Hash identifier: TH237hpb5baSdMX1CrdQw2akzkdha/Rr/qXjLW2kNcw=
Subject key identifier: B2:28:F1:5C:62:E5:6D:70:9D:27:83:17:53:C1:27:78:15:0D:55:3C
Authority key identifier: 36:6F:A0:CA:18:AF:F2:14:EC:05:B5:D4:78:0E:B3:C6:EE:E6:6E:3E
Certificate issuer: /CN=366fa0ca18aff214ec05b5d4780eb3c6eee66e3e
Certificate serial: 0198D4E0CC36A43560ABBB4CB48F8B252C4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
Manifest number: 0337
Signing time: Sat 23 Aug 2025 03:02:38 +0000
Manifest this update: Sat 23 Aug 2025 03:02:38 +0000
Manifest next update: Sun 24 Aug 2025 03:02:38 +0000
Files and hashes: 1: Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl (hash: 2fKztl7CORx+EjLEiYX4s5uBaamb7W0bK1zL/tXbVgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:cc:36:a4:35:60:ab:bb:4c:b4:8f:8b:25:2c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=366fa0ca18aff214ec05b5d4780eb3c6eee66e3e
Validity
Not Before: Aug 23 03:02:38 2025 GMT
Not After : Aug 24 03:02:38 2025 GMT
Subject: CN=b228f15c62e56d709d27831753c12778150d553c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:60:38:3c:e2:52:ce:40:c6:f5:92:3a:4e:af:
f6:ff:8b:7d:f6:fc:54:8d:dd:d7:ca:26:ba:a7:59:
e1:e0:70:ee:c5:36:ba:cf:d1:58:f8:fa:60:68:c1:
83:1d:93:9e:a6:c5:f5:da:58:ba:e3:e8:04:00:9b:
65:dd:2f:b5:20:a3:d2:27:9b:2d:65:ef:21:b3:8a:
03:5e:a5:02:e3:56:20:6e:bb:8d:65:0f:b1:b5:90:
31:c3:84:65:aa:cb:a4:0c:3a:2a:c3:2a:4a:44:79:
80:c1:fe:cb:ac:36:ba:e2:73:3f:5a:57:92:28:7b:
f6:f2:62:11:5c:63:0f:df:2a:4e:ac:9f:7c:23:4e:
57:e8:67:0d:98:ca:d9:e8:92:43:0e:8f:11:b3:af:
b8:43:7a:ed:9c:a3:fa:76:db:cd:19:04:21:ef:29:
21:59:ff:44:9c:a9:ac:6c:3c:b4:a3:25:fb:25:6a:
77:e2:93:70:c4:40:18:fe:2a:5d:ca:b3:f1:5e:bc:
d1:39:0e:1b:d1:2b:9a:f0:48:ee:bf:7a:1e:e9:8c:
eb:f8:8e:a9:24:f0:29:fd:ea:b1:f8:29:66:3f:da:
a6:a6:e5:49:a2:3b:69:6f:a1:53:f4:8c:a1:b1:57:
bc:1f:0b:f6:df:18:fa:d2:20:67:20:6e:76:0e:2e:
46:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:28:F1:5C:62:E5:6D:70:9D:27:83:17:53:C1:27:78:15:0D:55:3C
X509v3 Authority Key Identifier:
keyid:36:6F:A0:CA:18:AF:F2:14:EC:05:B5:D4:78:0E:B3:C6:EE:E6:6E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:3a:3c:b5:56:6c:5f:c5:f9:f1:7d:91:8e:6a:42:c9:18:72:
9e:fa:1e:ef:57:da:af:bd:17:53:78:94:78:3e:3b:c8:42:a2:
0e:78:27:98:6b:ab:f2:24:56:61:b8:3e:aa:43:79:ab:95:bb:
c9:3b:57:24:d0:48:89:2b:09:0c:6e:f8:7f:20:50:41:1e:9a:
88:79:e1:29:f7:b6:0a:c0:0e:67:14:08:46:20:2d:61:a1:77:
d4:d5:99:2c:07:6f:32:6f:83:e0:e9:4c:19:2f:1a:34:3c:b8:
86:39:76:60:5d:fb:05:35:1f:5b:98:6c:57:8f:6d:00:90:77:
b4:bd:f8:94:b1:86:4d:2c:11:d6:81:98:1e:92:03:f9:57:33:
31:09:22:80:c5:72:cd:89:a1:f0:b7:80:c3:94:56:02:bf:74:
89:53:38:9b:33:0d:bd:98:77:bb:98:17:07:b5:d9:5e:51:f0:
7b:59:bd:a3:a2:31:03:e8:bb:c9:89:c8:22:fe:76:bd:8e:c5:
ce:1b:22:85:97:6f:db:2a:36:66:28:b2:9e:5e:57:9f:11:2f:
f2:07:c0:c8:fd:91:42:a8:ba:3e:2f:cd:69:ac:95:4d:c0:f0:
ca:a4:0d:36:ca:e3:33:84:a7:86:fd:26:a8:0f:32:df:67:0e:
f9:c6:b4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:07 2025 by rpki-client